In the documentation I can see that the whole domain configuration and all user information can be exported by the "startup" export functionality. http://www.keycloak.org/docs/latest/server_admin/topics/export-import.html Unfortunately this method requires us to stop the server to do the export. What is the recommended procedure to export domain configuration and users in an actively running keycloak instance? _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Dear Sebastien thanks for your response. This seems to be an easy solution. Having an automatted process in mind, is there any way to know when I can stop the instance again "once the export is done"? -----Ursprüngliche Nachricht----- Von: Sebastien Blanc [mailto:sblanc@redhat.com] Gesendet: Freitag, 27. Oktober 2017 10:50 An: Knurr, Michael <Michael.Knurr(a)adesso.ch&gt; Cc: keycloak-user(a)lists.jboss.org Betreff: Re: [keycloak-user] Backup of config and users You can just run another instance on a different port (i.e : with -Djboss.socket.binding.port-offset=) with the export args , then you can safely stop this instance once the export is done. On Fri, Oct 27, 2017 at 10:32 AM, Knurr, Michael <Michael.Knurr(a)adesso.ch&gt; wrote: > In the documentation I can see that the whole domain configuration and > all user information can be exported by the "startup" export functionality. > > http://www.keycloak.org/docs/latest/server_admin/topics/export-import. > html > > Unfortunately this method requires us to stop the server to do the export. > What is the recommended procedure to export domain configuration and > users in an actively running keycloak instance? > > > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user > _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user

Well, I don’t know, using db tools is certainly more efficient. There are probably a number of ways to backup the keycloak data. However, looking at it from a „product perspective“ I think that keycloak needs to have a builtin method to backup and restore its own data. When you are running keycloak in a production environment you need to have a recommended and supported way of creating and restoring your backups. Most certainly there are alredy a number of companies which already have these procedures in place. Wouldn’t it be a good idea to write them down and add them to a „backup and restore“ Chapter in the keycloak documentation? What do you think? *Von:* Stian Thorgersen [mailto:sthorger@redhat.com] *Gesendet:* Mittwoch, 1. November 2017 06:58 *An:* Knurr, Michael <Michael.Knurr(a)adesso.ch&gt; *Cc:* Sebastien Blanc <sblanc(a)redhat.com>; keycloak-user < keycloak-user(a)lists.jboss.org&gt; *Betreff:* Re: [keycloak-user] Backup of config and users Wouldn't it be better and more efficient to use dB tools for backing up the dB? On 30 Oct 2017 8:27 am, "Knurr, Michael" <Michael.Knurr(a)adesso.ch&gt; wrote: Dear Sebastien thanks for your response. This seems to be an easy solution. Having an automatted process in mind, is there any way to know when I can stop the instance again "once the export is done"? -----Ursprüngliche Nachricht----- Von: Sebastien Blanc [mailto:sblanc@redhat.com] Gesendet: Freitag, 27. Oktober 2017 10:50 An: Knurr, Michael <Michael.Knurr(a)adesso.ch&gt; Cc: keycloak-user(a)lists.jboss.org Betreff: Re: [keycloak-user] Backup of config and users You can just run another instance on a different port (i.e : with -Djboss.socket.binding.port-offset=) with the export args , then you can safely stop this instance once the export is done. On Fri, Oct 27, 2017 at 10:32 AM, Knurr, Michael <Michael.Knurr(a)adesso.ch&gt; wrote: > In the documentation I can see that the whole domain configuration and > all user information can be exported by the "startup" export functionality. > > http://www.keycloak.org/docs/latest/server_admin/topics/export-import. > html > > Unfortunately this method requires us to stop the server to do the export. > What is the recommended procedure to export domain configuration and > users in an actively running keycloak instance? > > > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user > _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user